Underground-Digital/Workflow-Engine

1from functools import wraps2 3from flask import request4from flask_restful import Resource, reqparse5from werkzeug.exceptions import NotFound, Unauthorized6 7from configs import dify_config8from constants.languages import supported_language9from controllers.console import api10from controllers.console.wraps import only_edition_cloud11from extensions.ext_database import db12from models.model import App, InstalledApp, RecommendedApp13 14 15def admin_required(view):16    @wraps(view)17    def decorated(*args, **kwargs):18        if not dify_config.ADMIN_API_KEY:19            raise Unauthorized("API key is invalid.")20 21        auth_header = request.headers.get("Authorization")22        if auth_header is None:23            raise Unauthorized("Authorization header is missing.")24 25        if " " not in auth_header:26            raise Unauthorized("Invalid Authorization header format. Expected 'Bearer <api-key>' format.")27 28        auth_scheme, auth_token = auth_header.split(None, 1)29        auth_scheme = auth_scheme.lower()30 31        if auth_scheme != "bearer":32            raise Unauthorized("Invalid Authorization header format. Expected 'Bearer <api-key>' format.")33 34        if dify_config.ADMIN_API_KEY != auth_token:35            raise Unauthorized("API key is invalid.")36 37        return view(*args, **kwargs)38 39    return decorated40 41 42class InsertExploreAppListApi(Resource):43    @only_edition_cloud44    @admin_required45    def post(self):46        parser = reqparse.RequestParser()47        parser.add_argument("app_id", type=str, required=True, nullable=False, location="json")48        parser.add_argument("desc", type=str, location="json")49        parser.add_argument("copyright", type=str, location="json")50        parser.add_argument("privacy_policy", type=str, location="json")51        parser.add_argument("custom_disclaimer", type=str, location="json")52        parser.add_argument("language", type=supported_language, required=True, nullable=False, location="json")53        parser.add_argument("category", type=str, required=True, nullable=False, location="json")54        parser.add_argument("position", type=int, required=True, nullable=False, location="json")55        args = parser.parse_args()56 57        app = App.query.filter(App.id == args["app_id"]).first()58        if not app:59            raise NotFound(f'App \'{args["app_id"]}\' is not found')60 61        site = app.site62        if not site:63            desc = args["desc"] or ""64            copy_right = args["copyright"] or ""65            privacy_policy = args["privacy_policy"] or ""66            custom_disclaimer = args["custom_disclaimer"] or ""67        else:68            desc = site.description or args["desc"] or ""69            copy_right = site.copyright or args["copyright"] or ""70            privacy_policy = site.privacy_policy or args["privacy_policy"] or ""71            custom_disclaimer = site.custom_disclaimer or args["custom_disclaimer"] or ""72 73        recommended_app = RecommendedApp.query.filter(RecommendedApp.app_id == args["app_id"]).first()74 75        if not recommended_app:76            recommended_app = RecommendedApp(77                app_id=app.id,78                description=desc,79                copyright=copy_right,80                privacy_policy=privacy_policy,81                custom_disclaimer=custom_disclaimer,82                language=args["language"],83                category=args["category"],84                position=args["position"],85            )86 87            db.session.add(recommended_app)88 89            app.is_public = True90            db.session.commit()91 92            return {"result": "success"}, 20193        else:94            recommended_app.description = desc95            recommended_app.copyright = copy_right96            recommended_app.privacy_policy = privacy_policy97            recommended_app.custom_disclaimer = custom_disclaimer98            recommended_app.language = args["language"]99            recommended_app.category = args["category"]100            recommended_app.position = args["position"]101 102            app.is_public = True103 104            db.session.commit()105 106            return {"result": "success"}, 200107 108 109class InsertExploreAppApi(Resource):110    @only_edition_cloud111    @admin_required112    def delete(self, app_id):113        recommended_app = RecommendedApp.query.filter(RecommendedApp.app_id == str(app_id)).first()114        if not recommended_app:115            return {"result": "success"}, 204116 117        app = App.query.filter(App.id == recommended_app.app_id).first()118        if app:119            app.is_public = False120 121        installed_apps = InstalledApp.query.filter(122            InstalledApp.app_id == recommended_app.app_id, InstalledApp.tenant_id != InstalledApp.app_owner_tenant_id123        ).all()124 125        for installed_app in installed_apps:126            db.session.delete(installed_app)127 128        db.session.delete(recommended_app)129        db.session.commit()130 131        return {"result": "success"}, 204132 133 134api.add_resource(InsertExploreAppListApi, "/admin/insert-explore-apps")135api.add_resource(InsertExploreAppApi, "/admin/insert-explore-apps/<uuid:app_id>")136